okd/roles/openshift_repos/tasks/main.yaml

---
- name: openshift_repos detect ostree
  stat:
    path: /run/ostree-booted
  register: ostree_booted

- block:
  - name: Ensure libselinux-python is installed
    package: name=libselinux-python state=present

  - name: Create any additional repos that are defined
    template:
      src: yum_repo.j2
      dest: /etc/yum.repos.d/openshift_additional.repo
    when:
    - openshift_additional_repos | length > 0
    notify: refresh cache

  - name: Remove the additional repos if no longer defined
    file:
      dest: /etc/yum.repos.d/openshift_additional.repo
      state: absent
    when:
    - openshift_additional_repos | length == 0
    notify: refresh cache

  - name: Configure origin gpg keys if needed
    copy:
      src: "{{ item.src }}"
      dest: "{{ item.dest }}"
    with_items:
    - src: origin/gpg_keys/openshift-ansible-CentOS-SIG-PaaS
      dest: /etc/pki/rpm-gpg/
    - src: origin/repos/openshift-ansible-centos-paas-sig.repo
      dest: /etc/yum.repos.d/
    notify: refresh cache
    when:
    - ansible_os_family == "RedHat"
    - ansible_distribution != "Fedora"
    - openshift_deployment_type == 'origin'
    - openshift_enable_origin_repo | default(true) | bool

  # Singleton block
  - when: r_osr_first_run | default(true)
    block:
    - name: Ensure clean repo cache in the event repos have been changed manually
      debug:
        msg: "First run of openshift_repos"
      changed_when: true
      notify: refresh cache

    - name: Set fact r_osr_first_run false
      set_fact:
        r_osr_first_run: false

  # Force running ALL handlers now, because we expect repo cache to be cleared
  # if changes have been made.
  - meta: flush_handlers

  when: not ostree_booted.stat.exists